1 1 . A method of controlling access to a computer system, comprising: 

2 receiving a request to log into the computer system; 

3 determining if a smart card is being used as a part of a login protocol to log 

4 in to the computer system; 

5 if so, permitting use of the computer system and logging use of the 

6 computer system for the user associated with the smart card; and 

7 if not, permitting use of the computer system and logging use of the 

8 computer system to an unknown user. 
9 

10 2. The method according to claim 1 , further comprising setting an alert when 

1 fcj use of the computer system is permitted and logged to an unknown user. 

1 S 

1S2 3. The method according to claim 2, wherein the alert comprises changing a 

1 §i visual appearance of an icon. 

16 4. The method according to claim 2, further comprising clearing the alert if the 

1jl user associated with the smart card has rights to clear alerts when the smart card 

ijS: is being used as a part of the login protocol. 

hi 

20 5. The method according to claim 1 , further comprising determining an access 

21 restriction associated with a user associated with the smart card and permitting 

22 use of the computer system subject to the access restriction when the smart card 

23 is being used as a part of the login protocol. 
24 

25 6, The method according to claim 5, further comprising denying access to the 

26 computer system when the access restriction is not met. 
27 

28 7, The method according to claim 5, wherein the access restriction comprises 

29 restriction of time of day that use of the computer system is permitted, 
30 
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1 8. The method according to claim 5, wherein the access restriction comprises 

2 restriction of computer programs that can be executed on the computer system. 
3 

4 9. The method according to claim 1 , further comprising: 

5 setting a timer to measure a time period whenever use of the computer 

6 system is permitted; 

7 resetting the timer when the computer system is actively being used; and 

8 carrying out an automatic logout when the computer system has not been 

9 actively used during the time period. 
10 

U 10. The method according to claim 1 , further comprising permitting initialization 

^ of a smart card if the user associated with the smart card has rights to initialize a 

1| smart card, when the smart card is being used as a part of the login protocol. 

% 11. The method according to claim 10, wherein the initialization further 

16 comprises establishing access restrictions for a user of the smart card. 

ft 12. The method according to claim 1, wherein the use logging comprises 

fi making entries into a log file of a user name, time and date of computer system 

20 use. 
21 

22 13. The method according to claim 12, wherein the use logging further 

23 comprises making entries into the log file of computer programs accessed. 
24 

25 14. A computer readable storage medium storing instructions that, when 

26 executed on a programmed processor, carry out the method according to claim 1 . 
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15. A method of controlling access to a computer system, comprising: 
receiving a request to log into the computer system; 
determining if a smart card is being used as a part of a login protocol to log 
in to the computer system; 

if so, permitting use of the computer system and logging use 
of the computer system for the user associated with the smart card; 

if not, permitting use of the computer system and logging use 
of the computer system to an unknown user; 
setting an alert by changing a visual appearance of an icon when use of the 
computer system is permitted and logged to an unknown user; 

determining an access restriction associated with a user associated with the 
smart card and permitting use of the computer system subject to the access . 
restriction when the smart card is being used as a part of the login protocol; 

denying access to the computer system when the access restriction is not 

met; 

setting a timer to measure a time period whenever use of the computer 
system is permitted; 

resetting the timer when the computer system is actively being used; 

carrying out an automatic logout when the computer system has not been 
actively used during the time period; and 

wherein the use logging comprises making entries into a log file of a user 
name, time and date of computer system use. 
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1 16. A computer system having an access control system, comprising: 

2 a central processor; 

3 a smart card reader accessible by the central processor; 

4 a security program running on the central processor that: 

5 determines if a smart card is being used as a part of a login 

6 protocol to log in to the computer system; 

7 if so, permits use of the computer system and logs use of the 

8 computer system for the user associated with the smart card; and 

9 if not, permits use of the computer system and logs use of the 
1 0 computer system to an unknown user. 

14 

fjf 17. The apparatus according to claim 16, wherein the security program further 

{| sets* an alert when use of the computer system is permitted and logged to an 

H4 unknown user. 

16 1 8. The apparatus according to claim 1 7, wherein the alert comprises changing 

If a visual appearance of an icon. 

% 

W 19. The apparatus according to claim 17, the security program further 

20 determines an access restriction associated with a user associated with the smart 

21 card and permits use of the computer system subject to the access restriction 

22 when the smart card is being used as a part of the login protocol; and denies 

23 access to the computer system when the access restriction is not met. 
24 

25 
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20. The apparatus according to claim 17, wherein the security program also: 
sets a timer to measure a time period whenever use of the computer system 

is permitted; 

resets the timer when the computer system is actively being used; and 
carries out an automatic logout when the computer system has not been 
actively used during the time period. 

21. The method according to claim 17, wherein the use logging comprises 
making entries into a log file of a user name, time and date of computer system 
use. 
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